Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The North Korean BlueNoroff threat actor operates an active phishing kit impersonating Zoom and Microsoft Teams to deliver malware. Using typosquatted domains and ClickFix-style social engineering, the group profiles victims' cryptocurrency wallets before malware delivery for selective targeting of high-value victims.
The article details a case where the Larva-26009 threat actor targeted MS-SQL servers to install the XMRig CoinMiner. It highlights the persistent threat of cryptocurrency mining malware against database infrastructure.
AhnLab's ASEC discovered a targeted attack on MS-SQL servers where the Larva-26009 group deployed CoinMiner along with remote access tools and VPN, indicating a sophisticated campaign.
While monitoring attack cases targeting MS-SQL servers, the AhnLab SEcurity intelligence Center (ASEC) identified an instance in which the Larva-26009 threat actor installed the XMRig CoinMiner.
Resin art has become a popular corner of TikTok, with some videos attracting millions of views.
Scammers on TikTok are exploiting the popularity of resin art videos to deceive buyers, collectors, and artists. These fraudsters impersonate legitimate resin artists by posting stolen videos of glossy, colorful resin creations, often attracting millions of views.